Loading npm security reports…

kixparadigm-en@1.3.5: AI-agent control-surface risk | LPM Firewall

registry / kixparadigm-en / 1.3.5

kixparadigm-en@1.3.5

kixparadigm-en — English edition of the kix paradigm preset for DeepSeek Harness: resident cognition layer (EN) + kixpower multi-agent orchestration, one-command import (preset + vision-bridge + guard plugins)

AI Security Review

scanned 7d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The automatic postinstall modifies the foreign DSH web profile's plugin-loading configuration. It registers package code without a separate user setup action.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

npm installation runs the postinstall hook.

Impact

Package code is configured to load in the user's host agent web profile after restart.

Mechanism

The installer copies the bridge, establishes its loading link, and merges its registration into the host profile's cordis.patch.yml.

Policy narrative

Installing the package automatically invokes its quiet installer. With no command supplied, installation is selected and the vision bridge is registered in the user's DSH web profile. Although the bridge files belong to this package, the modified plugin-loading configuration belongs to the foreign host agent. Source shows no separate consent gate before this mutation.

AI rationale

The automatic postinstall writes a foreign agent's plugin-loading control surface without explicit setup consent, meeting the supplied blocking policy. Patch validation and package-owned plugin files do not remove that control-surface mutation.

Evidence

package.jsonscripts/install-lib.js.dshprofiles/webplugins/dsh-vision-bridgenode_modules/dsh-vision-bridgecordis.patch.yml

Decision evidence

Source & flagged code

14 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install-lib.js --quiet

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install-lib.js --quiet

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install-lib.jsView file

17const os = require('node:os') L18: const { spawnSync } = require('node:child_process') L19:

High

Child Process

Package source references child process execution.

scripts/install-lib.jsView on unpkg · L17

17Cross-file remote execution chain: scripts/install-lib.js spawns preset-classic-en/plugins/kix-guards.test.js; helper contains network access plus dynamic code execution. L17: const os = require('node:os') L18: const { spawnSync } = require('node:child_process') L19: L20: const PKG_ROOT = path.join(__dirname, '..') L21: // 各语言包的安装目标由各自 package.json 的 "kixparadigm" 段声明： L22: // { variants: [{ id, dir }, ...], bridgeDir } —— 缺省 = 中文主包行为 L23: // 旧字段 presetId/presetDir 仍受支持（等价于单元素 variants）。 L24: const PKG = JSON.parse(fs.readFileSync(path.join(PKG_ROOT, 'package.json'), 'utf8')) L25: const CFG = PKG.kixparadigm || {} ... L129: function dshHome() { L130: return process.env.DSH_HOME || path.join(os.homedir(), '.dsh') L131: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/install-lib.jsView on unpkg · L17

bin/kixparadigm-en.jsView file

3// kixparadigm-en CLI — English edition, installs the kixparadigm-en preset L4: require('../scripts/install-lib.js').cli(process.argv.slice(2))

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kixparadigm-en.jsView on unpkg · L3

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View file

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = payload_in_excluded_dir sizeBytes = 56539 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•matchType = normalized_sha256 matchedPackage = kixparadigm@1.3.20 matchedPath = dsh/preset-[redacted]-contract-regression.ps1 matchedIdentity = npm:a2l4cGFyYWRpZ20:1.3.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1View on unpkg

•path = preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1 kind = build_helper sizeBytes = 56539 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

preset-classic-en/skills/kixpower/tests/run-contract-regression.ps1

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

preset-classic-en/plugins/kix-discipline.js#virtual:normalized:round1View on unpkg

bridge/index.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = bridge/index.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/index.jsView on unpkg

bridge/test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = bridge/test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bridge/test.jsView on unpkg

preset-classic-en/plugins/kix-browser.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/plugins/kix-browser.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-browser.jsView on unpkg

preset-classic-en/plugins/kix-commands.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm@1.3.20 matchedPath = dsh/preset-classic/plugins/kix-commands.js matchedIdentity = npm:a2l4cGFyYWRpZ20:1.3.20 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-commands.jsView on unpkg

preset-classic-en/plugins/kix-browser.test.jsView file

•matchType = normalized_sha256 matchedPackage = kixparadigm-en@1.3.9 matchedPath = preset-classic-en/plugins/kix-browser.test.js matchedIdentity = npm:a2l4cGFyYWRpZ20tZW4:1.3.9 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

preset-classic-en/plugins/kix-browser.test.jsView on unpkg